Overview

overview

8

Static

static

1b62834e35...b4.exe

windows7-x64

8

1b62834e35...b4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b62834e351b1d9fbb419cbd2a26fc6b202a9de46b0e821900d8f538881928b4

  • Size

    178KB

  • Sample

    221127-t4nvbaca75

  • MD5

    2e8a00eadb1bad304b3fd838e4394065

  • SHA1

    8ca00cccbe760bd45b5c7b64a88a4082d7ec6d41

  • SHA256

    1b62834e351b1d9fbb419cbd2a26fc6b202a9de46b0e821900d8f538881928b4

  • SHA512

    99169d4e41ac9e04ddd8c31140bfc14fb3399f8a172d11ef9ef9c111f11d3e72e131823e1f1be7e95ce6e54a781e8e07c951061d8db0a14a6f06bfe5aa9fa6ba

  • SSDEEP

    3072:ETIw/g8ZIogicblSGPkxNem8sNAZtXGZi5ysdAMvI0ox5HyWTQs5R6bTWXS:ET1/g8+JxNc/VPGHgoyOAqsQ70i

Score
8/10
persistence

Malware Config

Targets

    • Target

      1b62834e351b1d9fbb419cbd2a26fc6b202a9de46b0e821900d8f538881928b4

    • Size

      178KB

    • MD5

      2e8a00eadb1bad304b3fd838e4394065

    • SHA1

      8ca00cccbe760bd45b5c7b64a88a4082d7ec6d41

    • SHA256

      1b62834e351b1d9fbb419cbd2a26fc6b202a9de46b0e821900d8f538881928b4

    • SHA512

      99169d4e41ac9e04ddd8c31140bfc14fb3399f8a172d11ef9ef9c111f11d3e72e131823e1f1be7e95ce6e54a781e8e07c951061d8db0a14a6f06bfe5aa9fa6ba

    • SSDEEP

      3072:ETIw/g8ZIogicblSGPkxNem8sNAZtXGZi5ysdAMvI0ox5HyWTQs5R6bTWXS:ET1/g8+JxNc/VPGHgoyOAqsQ70i

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Modifies AppInit DLL entries

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks